Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa
File: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (raw, json)
Hash identifier: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=
Subject key identifier: 4D:1E:AF:64:A9:C7:7E:FF:74:EC:2E:38:9E:EF:D8:E1:D7:DC:AB:5A
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 2E6A12B2A18137AF33006C9399A5825A988635C5
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa
Signing time: Wed 17 Jun 2026 15:52:55 +0000
ROA not before: Wed 17 Jun 2026 15:47:55 +0000
ROA not after: Wed 16 Jun 2027 15:52:55 +0000
asID: 219433
IP address blocks: 2a0a:d687:e000::/43 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 19:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6a:12:b2:a1:81:37:af:33:00:6c:93:99:a5:82:5a:98:86:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Jun 17 15:47:55 2026 GMT
Not After : Jun 16 15:52:55 2027 GMT
Subject: CN=4D1EAF64A9C77EFF74EC2E389EEFD8E1D7DCAB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:43:38:43:1a:15:06:f9:a0:42:12:68:cc:
2d:70:e9:96:84:b9:f1:06:24:17:88:b2:9c:32:77:
27:5e:4c:f7:0e:54:83:cc:82:89:65:1e:84:15:4b:
b3:0f:41:7e:f1:11:4d:17:83:cd:c9:28:52:13:38:
75:16:32:ed:aa:20:8f:e9:0b:53:4d:15:b7:de:a3:
27:41:a6:ec:db:9e:84:9b:4a:d4:9c:4b:43:5b:00:
43:f5:cb:f0:b0:d9:5f:a7:bf:bd:29:bc:e9:75:db:
3a:61:72:97:f7:48:ac:10:08:db:6b:7f:56:b8:b3:
8e:38:d4:50:81:a5:37:04:bf:4f:e6:4c:41:56:1c:
e2:67:38:33:7a:27:ce:59:04:29:9b:85:38:6a:86:
b9:88:82:28:03:cd:79:6e:08:ed:d5:4b:d0:82:26:
98:5c:3d:19:a2:f9:d9:99:c2:9d:c7:00:8d:a5:e3:
8e:02:f6:30:5d:5e:f1:7c:42:30:3d:4d:5a:e1:bb:
4b:a5:12:2f:12:78:f5:5f:9b:d1:24:98:b5:19:7d:
73:84:1f:af:f9:4c:aa:d5:68:0c:7d:91:4b:29:6a:
ec:2b:cc:6a:78:ef:94:3a:d8:aa:3d:d1:5c:38:59:
20:77:82:da:2e:10:0d:a9:f3:15:72:43:fe:d6:33:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:AF:64:A9:C7:7E:FF:74:EC:2E:38:9E:EF:D8:E1:D7:DC:AB:5A
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d687:e000::/43
Signature Algorithm: sha256WithRSAEncryption
86:53:85:b9:97:38:e2:b0:30:5f:8e:67:ad:d2:f5:2f:d2:8f:
c0:ed:fd:ed:64:37:a7:5c:0f:d5:41:91:d4:ea:97:c3:a3:17:
9c:e9:69:c1:05:2f:bb:f3:4c:77:0d:cb:8a:41:ae:2d:ee:1c:
2b:c4:0f:27:d9:6e:b1:31:0a:1d:f6:d1:29:3e:73:2d:aa:bf:
4b:9e:8a:34:d3:f5:a5:7e:be:85:a5:75:7e:81:c1:c4:b1:a8:
9a:26:e5:f4:b1:d4:5c:4a:ac:80:7f:f2:44:fb:04:45:9e:02:
4c:58:5a:00:35:d4:13:e2:c6:a5:9f:35:d3:0e:12:5f:c6:7b:
25:c0:d0:4c:b7:10:74:d6:65:b0:16:18:09:c4:30:30:97:e2:
e8:27:2c:25:51:e7:2e:ac:c0:9d:9f:0f:99:cb:29:e8:48:56:
8e:52:6d:e8:8e:dc:a4:80:f5:66:41:11:06:9e:44:2c:47:93:
2d:46:d6:52:a7:4a:ac:7d:b1:1c:fc:1e:d4:88:b6:0d:72:8a:
bd:b6:42:0c:69:c7:83:22:95:ae:d1:6f:2c:0d:a7:a0:2b:03:
51:72:cb:53:87:d0:08:63:25:d9:6d:21:0b:e8:77:8d:82:0b:
4c:f9:26:d1:fb:ac:4c:d7:28:a6:60:98:f7:30:94:7c:33:1d:
17:9c:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:07:00 2026 by rpki-client